Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: bhXa9gCcr6BTw23rD3gRBfBo7XgWItxLruLAH1PSmAk=
Subject key identifier: 6C:F5:44:8F:D6:A7:87:4A:67:74:2C:AF:09:01:DF:45:C4:AD:15:7D
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019CAAC64AF3FA57631C9AB117A38C5A323C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0F91
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 2aBm7+734i27/P+koTqtGb3BhhcTpvjuh1N9SduYWik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4a:f3:fa:57:63:1c:9a:b1:17:a3:8c:5a:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=6cf5448fd6a7874a67742caf0901df45c4ad157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:f3:c6:54:94:04:e8:67:3a:41:df:0b:b9:
6e:1e:34:9d:ac:73:75:15:2a:4c:04:29:3c:cb:69:
f2:61:20:9d:08:e4:ce:40:82:a5:96:a6:c3:9c:36:
26:30:9c:c2:a4:25:22:38:a6:7f:f6:62:4e:ef:cc:
7f:de:89:1f:a2:62:b8:88:db:dc:9b:83:cb:d8:97:
40:69:27:74:5a:a1:9f:5b:45:3f:55:9e:86:32:12:
e9:b2:58:d5:47:8e:7a:3e:58:32:a9:a1:26:a8:13:
b4:28:cd:66:03:7c:d8:d6:e3:d0:87:fc:27:67:c0:
09:5e:03:56:ca:fc:e1:e8:3c:5d:46:41:50:0d:32:
fe:e7:7c:7b:dc:ef:81:c7:9f:c5:8f:29:24:01:d7:
42:57:15:27:45:dd:d3:4d:98:63:95:51:b1:77:8c:
42:29:f4:51:fb:48:d4:cf:8f:a7:b5:41:b9:ef:06:
c5:db:bf:83:38:74:c4:a2:28:75:ff:a6:a4:90:30:
30:8c:a4:47:b4:97:b3:67:48:21:36:39:8b:55:43:
2d:76:83:bf:59:01:29:ec:e6:be:52:cd:3a:06:28:
ad:d0:1d:66:07:37:6c:f9:b9:4d:bf:21:76:8e:11:
6e:ac:13:bb:49:28:1d:cb:20:09:d2:88:96:5c:26:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:44:8F:D6:A7:87:4A:67:74:2C:AF:09:01:DF:45:C4:AD:15:7D
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:a3:44:29:43:44:33:c4:b7:90:38:e7:b2:4b:4c:6a:ac:
40:2d:19:82:ea:51:ff:20:50:a5:48:7d:63:76:25:40:be:2a:
49:c1:85:c4:88:e6:a0:6f:e8:88:92:32:36:c2:13:0c:ac:4c:
44:ce:c3:0b:3c:64:8b:37:f4:08:00:ee:77:26:69:f9:2e:b4:
e0:dd:f0:fb:c3:a0:14:36:56:57:c7:92:fe:52:f1:53:92:d6:
04:d8:11:6a:14:7f:7b:db:9f:c6:af:a8:d2:55:21:ba:67:72:
4f:fc:e9:bb:c9:67:14:77:2e:17:74:78:7d:f7:6a:91:b9:5d:
fe:66:5f:cd:55:2d:aa:1f:29:ac:58:1a:f8:42:d9:fc:5f:ea:
e0:61:83:02:ed:8d:23:55:b0:18:d0:e9:3a:89:eb:4c:fd:3b:
17:70:9f:20:63:45:93:87:79:a0:df:d1:9d:28:db:47:ff:95:
78:c5:f2:d9:20:14:9a:db:72:2a:a3:08:89:1d:7f:f9:3c:4b:
2f:49:11:af:f8:cf:57:98:cd:a2:4c:61:79:7a:11:db:10:d6:
fb:57:88:52:5e:2f:7c:b9:e6:57:4b:f0:af:c2:d0:b0:2f:02:
d6:7c:6e:b6:d4:c2:97:43:38:9a:02:26:4a:c8:66:13:d7:02:
67:a8:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:00 2026 by rpki-client